CVE-2010-4693

Coppermine Photo Gallery <1.5.10 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.

Exploits (2)

exploitdb WORKING POC VERIFIED
by waraxe · htmlwebappsphp
https://www.exploit-db.com/exploits/35157
exploitdb WORKING POC VERIFIED
by waraxe · textwebappsphp
https://www.exploit-db.com/exploits/35156

Scores

EPSS 0.0037
EPSS Percentile 58.7%

Classification

CWE
CWE-79
Status published

Affected Products (50)

coppermine-gallery/coppermine_photo_gallery < 1.5.10
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
... and 35 more

Timeline

Published Jan 11, 2011
Tracked Since Feb 18, 2026